Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/83fd7940-032c-3003-85c8-a52362a4b6ae.roa
File: 83fd7940-032c-3003-85c8-a52362a4b6ae.roa (raw, json)
Hash identifier: uyWCfbvTKnrWIJZwCNNHJSKb6SAqzOKDuFFr4mxSz3Q=
Subject key identifier: 51:8F:0D:71:6E:53:85:FE:D4:DA:C9:3A:BD:E9:08:1B:72:A5:AC:22
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858439AE3E0A8E69D3978B67F1000
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/83fd7940-032c-3003-85c8-a52362a4b6ae.roa
Signing time: Wed 18 Oct 2023 12:00:00 +0000
ROA not before: Wed 18 Oct 2023 12:00:00 +0000
ROA not after: Thu 18 Jan 2024 05:00:00 +0000
asID: 577
IP address blocks: 64.42.192.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:9a:e3:e0:a8:e6:9d:39:78:b6:7f:10:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Oct 18 12:00:00 2023 GMT
Not After : Jan 18 05:00:00 2024 GMT
Subject: CN=eb5baa62-0ef2-4e12-b1e9-9e589155a52e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:99:e6:0c:b5:a4:e4:bd:35:5c:fe:04:1c:29:
b6:91:da:e2:e7:b1:81:9a:0b:16:e1:d0:bd:19:91:
7a:d4:24:7f:d1:7d:ca:76:96:f8:d8:21:ae:27:f3:
61:dd:9b:4d:f4:5d:04:07:87:14:fa:88:78:1f:b4:
1e:57:62:01:a8:1a:b7:6a:3f:90:33:cc:f9:38:e1:
00:7e:68:d8:a7:81:54:29:66:39:2c:ce:cf:e4:9c:
c0:d7:a7:07:ee:24:5f:a9:69:72:63:5d:60:d2:02:
bb:e3:b1:ab:99:08:08:fe:4f:15:43:07:bd:ac:b1:
3f:9b:cb:70:52:9e:ad:03:df:11:a0:b0:61:b0:07:
c2:c8:fd:c6:27:2d:c6:08:25:83:38:48:b4:06:62:
a9:c2:13:92:be:23:55:33:50:4e:c4:68:5d:1c:d8:
04:23:b3:f3:8b:f0:dc:eb:49:f5:92:1e:e1:94:fa:
98:a2:fa:71:21:98:96:32:dc:9e:ff:38:5d:f7:f6:
20:09:13:a7:08:66:79:c1:98:30:ce:41:93:52:eb:
bc:8b:dc:40:ca:d2:76:fd:26:c2:2b:d2:56:2e:4f:
0f:d5:14:be:d7:27:ed:9e:5b:6e:41:8c:21:13:a9:
42:60:d6:2a:9b:d0:27:5a:f3:f4:23:90:a6:0f:8d:
a9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:8F:0D:71:6E:53:85:FE:D4:DA:C9:3A:BD:E9:08:1B:72:A5:AC:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/83fd7940-032c-3003-85c8-a52362a4b6ae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
64.42.192.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:75:24:55:5d:26:be:db:a9:84:8a:e1:27:75:ac:44:05:ff:
30:3b:71:5d:1d:13:49:41:53:08:27:0c:8e:da:5f:3c:dd:3c:
ae:8f:82:e9:60:c7:d7:62:b8:b4:77:29:2d:6a:6a:ac:cf:fa:
ed:55:c4:7e:8f:3a:7c:fa:77:ad:c0:64:32:38:c1:98:eb:f5:
c0:db:69:ff:9e:ee:20:9e:44:36:ee:13:63:e6:15:a2:c4:d3:
75:22:c3:96:cc:f2:16:77:81:b1:f4:4a:90:22:d5:43:7d:2b:
64:e6:f9:0b:f4:5f:c0:ef:a8:22:19:d3:b1:93:e2:35:bc:e2:
a6:36:31:cf:18:04:b1:44:e0:35:2a:3b:14:0c:55:1e:54:1f:
29:ee:77:fc:82:8b:34:52:c1:da:28:9e:d9:72:57:1a:97:86:
54:08:0d:8c:23:37:e9:60:aa:c1:73:18:22:d0:ca:8a:a2:bc:
4c:79:97:e7:45:d3:a8:a5:38:a0:e5:f3:73:ad:93:f4:8e:f9:
24:1b:e2:ed:ae:c5:eb:e2:a8:1a:76:87:8a:0c:94:7a:bc:60:
d7:2d:51:44:65:a1:6d:1a:cd:99:02:fb:be:3b:87:b9:89:3c:
a5:f1:0b:5c:44:32:24:cc:96:cb:cd:b8:83:ae:30:e5:c6:b3:
e8:7d:48:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 07:41:15 2024 by rpki-client on console-fra.rpki-client.org